Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VeZCDbbkY16lDNvD16w-oSzbci4.roa
File: VeZCDbbkY16lDNvD16w-oSzbci4.roa (raw, json)
Hash identifier: 14DES7/hWEzpEVZlSGLLBhaYPj5ja1Ym3ZuyvIH0gOc=
Subject key identifier: 55:E6:42:0D:B6:E4:63:5E:A5:0C:DB:C3:D7:AC:3E:A1:2C:DB:72:2E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019725F57FD205BFD5660FD0566CE3535C10
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VeZCDbbkY16lDNvD16w-oSzbci4.roa
Signing time: Sat 31 May 2025 10:48:55 +0000
ROA not before: Sat 31 May 2025 10:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.222.30.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.230.65.0/24 maxlen: 24
185.230.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:25:f5:7f:d2:05:bf:d5:66:0f:d0:56:6c:e3:53:5c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 31 10:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55e6420db6e4635ea50cdbc3d7ac3ea12cdb722e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9b:bc:30:12:91:45:43:88:32:76:47:2e:fa:
e4:26:09:4b:f0:11:19:e5:83:82:c0:f3:b4:2d:f9:
ac:e4:74:1b:eb:25:b0:c0:fc:bb:b5:4a:88:ff:74:
d0:cb:b1:9f:46:50:06:c3:4f:36:a7:ac:6c:e6:fe:
bc:9f:65:bc:43:27:ed:7f:d2:5b:4c:3a:b7:42:5f:
04:20:6f:b2:eb:4a:88:61:ff:ba:a3:ce:40:80:41:
9e:9c:43:ae:d0:ab:47:7b:95:cd:18:fa:b4:42:d3:
17:02:4b:84:c4:c6:05:b5:94:9a:f1:75:6b:95:91:
46:34:4e:b5:b3:88:72:65:97:b9:0a:d7:a3:38:df:
17:1d:4d:16:79:5e:d5:20:36:28:91:52:a0:38:4e:
4c:32:cb:6c:cd:61:57:c6:45:66:77:d2:47:62:75:
a4:76:5a:10:fa:1f:fa:34:df:bd:e1:8b:89:9a:a6:
8e:29:3d:f8:d1:ae:a6:4e:35:42:98:6e:5a:2a:3a:
91:6c:d1:11:8f:94:97:02:3e:87:87:eb:db:db:2e:
5e:a9:d9:7b:27:2e:95:56:f6:db:87:d0:16:73:1e:
35:f9:96:9c:30:27:43:7b:aa:ce:e3:2d:87:75:22:
44:d3:fb:6e:a1:8c:ec:0c:09:c3:f5:b6:d2:60:74:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E6:42:0D:B6:E4:63:5E:A5:0C:DB:C3:D7:AC:3E:A1:2C:DB:72:2E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VeZCDbbkY16lDNvD16w-oSzbci4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.30.0/24
185.223.82.0/24
185.230.65.0-185.230.66.255
Signature Algorithm: sha256WithRSAEncryption
a4:45:9b:2a:d4:b7:e5:25:7f:89:00:07:f5:65:9a:e6:a8:a4:
1b:93:c3:0f:54:25:51:c2:b3:24:0b:7a:ce:ae:2d:5a:fa:ec:
8d:94:1f:e4:53:0e:0a:3b:55:9e:a3:bc:0c:41:64:85:1b:20:
f7:dc:3f:82:d2:29:6c:aa:b4:69:3e:35:c5:fd:5e:6d:cc:a2:
5c:17:b8:3e:23:37:bc:c2:7f:53:da:f5:5f:60:a9:37:6b:f9:
9f:fe:f5:76:4e:af:ce:b5:14:29:c1:b0:7c:b2:b5:ed:26:5a:
30:59:ab:79:5d:ac:51:ce:7d:ab:42:b0:0b:b8:cc:92:28:75:
f7:d3:00:1f:06:af:84:d4:17:f7:dc:ca:2b:0f:46:d5:87:91:
18:8a:37:6a:fa:eb:60:45:b2:36:09:a1:5c:53:b2:a2:93:54:
e3:fc:1b:b7:42:05:92:7d:88:ee:9f:e7:fa:e5:bd:c0:b0:7c:
f2:7f:43:60:ed:0d:82:b7:66:ab:fa:38:b6:27:30:14:09:24:
4c:38:9c:61:9f:6b:99:47:88:0d:d9:e9:9b:6f:9c:22:7c:95:
dd:a2:5c:ac:0b:f3:52:bd:53:b2:be:ee:5f:4e:50:73:57:24:
59:c0:cb:81:06:7d:a1:07:33:99:f1:86:73:fe:ac:51:23:83:
37:51:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:29:20 2025 by rpki-client